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fHf AIM AMENDMENTS 
This listing of claims will replace all prior versions and listings of claims in the application. 
Ljsting of Claims 

* 

1 . (Currently Amended) A method for detecting impersonation based attacks at a wireless node 
of a wireless communication network, comprising the steps of: 

a) n p^rativelv connecting the wjr g lgss node with an intrusion detection module and 
providing atHhjLmtrusion detection module with a copy of original data frames transmitted by 

the wireless node over a wireless interface; 

b) detecting at the intrusion detection module incoming data frames received over the 

wireless interface; artd 

r) com paring at the intrusion detection module the informa tion i n the copy withjhe 

information in the incom ing data frames: and 

e)d) recognizing an impersonating attack the, intrusion detection module determines 
that the information in the copy differs from the information in the incoming data frames. 



2. (Original) The method of claim 1, wherein step a) comprises transmitting the copy over a 



secure 



link established between the wireless node and the intrusion detection module. 
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3. (Original) The method of claim 1 , wherein the copy comprises only management frames. 
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4. (Original) The method of claim 1, wherein the copy includes a summary of the outgoing data 
frames. 



5. (Original) The method of claim 4, wherein the summary of the outgoing data frames 



comprises fames that allow statistical comparisons. 



6. (Original) The method of claim 4, wherein the summary comprises the number of the 
outgoing data frames transmitted over a time interval. 



7. (Original) The method of claim 4, wherein the summary comprises the types of the original , 



data frames. 



8. (Currently Amended) The method of claim 1, wherein step b) comprises monitoring all 
wireless channels allocated to the wireless node and extracting the incoming data frames 
received over all the wireless nh*™?]* allocated to the wireless node. 



9. (Currently Amended) The method of claim 1, wherein step efdXcomprises: 

correlating the original data frames with the incoming data frames for detecting an 

inconsistency between the frames; and 

upon detection of the inconsistency, further processing the feeei^inccaiim.data frames 

for qualifying the impersonating attack. 

t 
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10. (Original) An impersonation detection system for a wireless node of a wireless 
communication network, the node for transmitting original data frames over a wireless interface 

comprising: 

an intrusion detection module for correlating the original data frames with incoming data 

frames received over the air interface; and 

connection means between the wireless node and the intrusion detection module for 

providing the intrusion detection module with a copy of the original data frames. 



II. (Original) The impersonation detection system of claim 10, wherein the intrusion detection 



module comprises: 

a first receiving unit for receiving the copy, 

an antenna for capturing the incoming traffic received on all transmission channels 

allocated to the wireless node; 

a second receiving unit for detecting the incoming data frames from the incoming traffic; 

and 

a data processing unit for correlating the copy with the incoming data frames and 



generating a impersonation detection signal. 
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12. (Original) The impersonation detection system of claim 1 1, wherein the intrusion detection 
module further comprises means for qualifying an intrusion attack based on the impersonation 
detected signal. 



13. (Currently Amended) The impersonation detection system of claim 10, wherein the 
connection means comprises, when the intrusion detection module resides away from the 
wireless node: 

a transmitting unit on the wireless node, for transmitting the copy to the intrusion 

detection module: and 

a secure link for connecting the wireless node with the intrusion detection module-aftd 

a receiving unit o n U m i nt r usion detection modulo for r e c eiv ing tho copy . 

14. (Original) The impersonation detection system of claim 12 wherein the secure link operates 
according to a communication protocol. 

15. (Original) The impersonation detection system of claim 10, wherein the wireless network 
operates according to any wireless network technology. 



16. (Currently Amended) The impersonation detection system of claim-Wj3, wherein the 
link is established as inter-processes communication, when the intrusion detection module 



secure 



is integrated within the wireless node. 
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17. (Original) A wireless node for a wireless network comprising: 



means 



for transmitting outgoing data frames over a wireless interface; 



an intrusion 



detection module for correlating the outgoing data frames with incoming 



data frames received from the air interface; and 

a secure link between the wireless node and the intrusion detection module for providing 

the intrusion detection module with a copy of the outgoing data frames. 



18. (Original) The wireless node of claim 17, wherein the intrusion detection module comprises: 
a first receiving unit for receiving the copy of the outgoing data frames; 
an antenna for capturing the incoming traffic carried on all transmission channels 

allocated to the wireless node; 

a second receiving unit for detecting the incoming data frames from the incoming traffic; 



and 



data processing unit for correlating the copy of the outgoing data frames with the 



incoming data frames and generating an impersonation detected signal. 



19. (Currently Amended) The an impersonation detection system of claim 18, wherein the 
detection module further comprises means for qualifying an intrusion attack based on 



intrusion 



the a-impersonation detected signal. 
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20. (Original) Hie impersonation detection system of claim 18, wherein the wireless network 
operates according to any wireless network technology. 
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